CVE-2026-42151

ADVISORY - github

Summary

Impact

Users who use Azure AD remote write with OAuth authentication are impacted.

The client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint.

Patches

The problem has been patched by changing ClientSecret in OAuthConfig to Secret. Users should upgrade to 3.11.3 or 3.5.3 LTS.

Workarounds

Users who can not upgrade can switch to Managed Identity or Workload Identity authentication for Azure AD remote write, which do not involve a client secret.

EPSS Score⁠: 0.0001 (0.013)

Common Weakness Enumeration (CWE)

ADVISORY - nist

Docker

CREATED

9 days ago

UPDATED

9 days ago

ADVISORY ID

CVE-2026-42151

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

NIST

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-42151⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-200⁠CWE-312⁠

CVSS SCORE

7.5high

GitHub

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY IDGHSA-wg65-39gg-5wfj⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-200⁠CWE-312⁠

CVSS SCORE

7.5high

Alpine

CREATED

6 days ago

UPDATED

6 days ago

ADVISORY IDCVE-2026-42151⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY IDCVE-2026-42151⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

15 hours ago

UPDATED

15 hours ago

ADVISORY IDCVE-2026-42151⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Bitnami

CREATED

12 hours ago

UPDATED

11 hours ago

ADVISORY ID

BIT-prometheus-2026-42151

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5high

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-294h-3rw8-w9gh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-2gfj-gjc9-c7p7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-3gcw-3jff-w4cw

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-48v8-xphh-q272

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-665f-mh77-gh9j

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-77hm-3qfc-fj3v

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-7893-pxc4-cw97

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-7pjx-c4j6-qgx3

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-8jmx-rrwj-hhjf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-8m2q-5586-mvxr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-8r5c-qc96-r8pw

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-8w4g-cv7f-62vv

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-8wpw-f74q-9958

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-964x-cc2j-24pc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-f4j5-7w5r-7gq8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-ffp2-3mc3-c6wr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-fgjc-72rx-fv99

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-g2vr-8mxh-rf5w

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-gc2w-5gv3-rqw3

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-gvg5-rfhj-3669

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-gxhw-r3qh-47wx

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-gxxh-h254-rqpc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-hf6w-j3x4-r2x7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-hhqj-36hm-gv7v

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-j3w9-vjgc-v5rf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-j98r-8f9c-cw24

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-jqc8-cmpg-q4jh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-jrh3-r5q6-3p8r

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-m993-r2v9-pr7x

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-pv8q-7r65-2h9j

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-pwhc-9cjh-c2c4

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-q23h-wc58-jjvg

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-r93g-r6m5-g2rc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-v7hx-h4gf-j5xh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-vhch-2gf4-6qh9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-vmmf-5h49-5mqj

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-vmpm-hvw5-465p

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-vxh3-9gc4-8gmh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-xjq3-wrjx-4p82

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-xmq6-m5cg-p329

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

CVE-2026-42151

Summary

Impact

Patches

Workarounds

Common Weakness Enumeration (CWE)

CWE-200⁠

CWE-312⁠

CWE-200⁠

CWE-312⁠

Advisories

Docker

NIST

CVSS SCORE

GitHub

CVSS SCORE

Alpine

Debian

Ubuntu

CVSS SCORE

Bitnami

CVSS SCORE

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos

minimos